From 4798d2f73e39b96755da07019191ec652dc91372 Mon Sep 17 00:00:00 2001 From: "nicolson%netscape.com" Date: Tue, 8 Jan 2002 19:38:47 +0000 Subject: [PATCH] SecretDecoderRing functionality, now appearing in JSS. --- .../mozilla/jss/crypto/SecretDecoderRing.c | 101 ++++++++++++++++++ .../mozilla/jss/crypto/SecretDecoderRing.java | 74 +++++++++++++ 2 files changed, 175 insertions(+) create mode 100644 security/jss/org/mozilla/jss/crypto/SecretDecoderRing.c create mode 100644 security/jss/org/mozilla/jss/crypto/SecretDecoderRing.java diff --git a/security/jss/org/mozilla/jss/crypto/SecretDecoderRing.c b/security/jss/org/mozilla/jss/crypto/SecretDecoderRing.c new file mode 100644 index 00000000000..3bf3a544833 --- /dev/null +++ b/security/jss/org/mozilla/jss/crypto/SecretDecoderRing.c @@ -0,0 +1,101 @@ +/* ***** BEGIN LICENSE BLOCK ***** + * Version: MPL 1.1/GPL 2.0/LGPL 2.1 + * + * The contents of this file are subject to the Mozilla Public License Version + * 1.1 (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * http://www.mozilla.org/MPL/ + * + * Software distributed under the License is distributed on an "AS IS" basis, + * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License + * for the specific language governing rights and limitations under the + * License. + * + * The Original Code is Netscape Security Services for Java. + * + * The Initial Developer of the Original Code is Netscape Communications + * Corporation. + * Portions created by the Initial Developer are Copyright (C) 2002 + * the Initial Developer. All Rights Reserved. + * + * Contributor(s): + * + * Alternatively, the contents of this file may be used under the terms of + * either the GNU General Public License Version 2 or later (the "GPL"), or + * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"), + * in which case the provisions of the GPL or the LGPL are applicable instead + * of those above. If you wish to allow use of your version of this file only + * under the terms of either the GPL or the LGPL, and not to allow others to + * use your version of this file under the terms of the MPL, indicate your + * decision by deleting the provisions above and replace them with the notice + * and other provisions required by the GPL or the LGPL. If you do not delete + * the provisions above, a recipient may use your version of this file under + * the terms of any one of the MPL, the GPL or the LGPL. + * + * ***** END LICENSE BLOCK ***** */ + +#include "_jni/org_mozilla_jss_crypto_SecretDecoderRing.h" +#include +#include +#include +#include +#include + +typedef enum {SDR_ENCRYPT, SDR_DECRYPT} SDROp; + +static jbyteArray +doSDR(JNIEnv *env, jobject this, jbyteArray inputBA, SDROp optype) +{ + SECStatus status; + jbyteArray outputBA = NULL; + SECItem keyID = {siBuffer, NULL, 0}; + SECItem *input= NULL; + SECItem output = {siBuffer, NULL, 0}; + + /* convert input to SECItem */ + if( inputBA == NULL ) { + JSS_throw(env, NULL_POINTER_EXCEPTION); + goto finish; + } + input = JSS_ByteArrayToSECItem(env, inputBA); + if( input == NULL) { + /* exception was thrown */ + goto finish; + } + + /* perform the operation*/ + if( optype == SDR_ENCRYPT ) { + status = PK11SDR_Encrypt(&keyID, input, &output, NULL /*cx*/); + } else { + PR_ASSERT( optype == SDR_DECRYPT); + status = PK11SDR_Decrypt(input, &output, NULL /*cx*/); + } + if(status != SECSuccess) { + JSS_throwMsg(env, TOKEN_EXCEPTION, "Operation failed"); + goto finish; + } + + /* convert output to byte array */ + outputBA = JSS_SECItemToByteArray(env, &output); + +finish: + if( input != NULL) { + SECITEM_FreeItem(input, PR_TRUE /* freeit */); + } + SECITEM_FreeItem(&output, PR_FALSE /*freeit*/); + return outputBA; +} + +JNIEXPORT jbyteArray JNICALL +Java_org_mozilla_jss_crypto_SecretDecoderRing_encrypt( + JNIEnv *env, jobject this, jbyteArray plaintextBA) +{ + return doSDR(env, this, plaintextBA, SDR_ENCRYPT); +} + +JNIEXPORT jbyteArray JNICALL +Java_org_mozilla_jss_crypto_SecretDecoderRing_decrypt( + JNIEnv *env, jobject this, jbyteArray ciphertextBA) +{ + return doSDR(env, this, ciphertextBA, SDR_DECRYPT); +} diff --git a/security/jss/org/mozilla/jss/crypto/SecretDecoderRing.java b/security/jss/org/mozilla/jss/crypto/SecretDecoderRing.java new file mode 100644 index 00000000000..ad67632fa0a --- /dev/null +++ b/security/jss/org/mozilla/jss/crypto/SecretDecoderRing.java @@ -0,0 +1,74 @@ +/* ***** BEGIN LICENSE BLOCK ***** + * Version: MPL 1.1/GPL 2.0/LGPL 2.1 + * + * The contents of this file are subject to the Mozilla Public License Version + * 1.1 (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * http://www.mozilla.org/MPL/ + * + * Software distributed under the License is distributed on an "AS IS" basis, + * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License + * for the specific language governing rights and limitations under the + * License. + * + * The Original Code is Netscape Security Services for Java. + * + * The Initial Developer of the Original Code is Netscape Communications + * Corporation. + * Portions created by the Initial Developer are Copyright (C) 2002 + * the Initial Developer. All Rights Reserved. + * + * Contributor(s): + * + * Alternatively, the contents of this file may be used under the terms of + * either the GNU General Public License Version 2 or later (the "GPL"), or + * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"), + * in which case the provisions of the GPL or the LGPL are applicable instead + * of those above. If you wish to allow use of your version of this file only + * under the terms of either the GPL or the LGPL, and not to allow others to + * use your version of this file under the terms of the MPL, indicate your + * decision by deleting the provisions above and replace them with the notice + * and other provisions required by the GPL or the LGPL. If you do not delete + * the provisions above, a recipient may use your version of this file under + * the terms of any one of the MPL, the GPL or the LGPL. + * + * ***** END LICENSE BLOCK ***** */ + +package org.mozilla.jss.crypto; + +/** + * This is a proprietary NSS interface. It is used for encrypting + * data with a secret key stored in the NSS key database (which is in turn + * protected with a password). It thus provides a quick, convenient way + * to encrypt stuff your application wants to keep around for its own use: + * for example, the list of web passwords stored in the web browser. + * + *

A dedicated key is used to encrypt all SecretDecoderRing data. + * The same key is used for all SDR data, and not for any other data. + * This key will be generated the first time it is needed. + * + *

The cipher used is DES3-EDE (Triple-DES) in CBC mode. The ciphertext + * is DER-encoded in the following ASN.1 data structure: + * 

+ *    SEQUENCE {
+ *      keyid       OCTET STRING,
+ *      alg         AlgorithmIdentifier,
+ *      ciphertext  OCTET STRING }
+ *
+ */ +public class SecretDecoderRing { + + /** + * Encrypts the given plaintext with the Secret Decoder Ring key stored + * in the NSS key database. + */ + public native byte[] encrypt(byte[] plaintext) + throws TokenException; + + /** + * Decrypts the given ciphertext with the Secret Decoder Ring key stored + * in the NSS key database. + */ + public native byte[] decrypt(byte[] ciphertext) + throws TokenException; +}